golang-github-lusitaniae-apache_exporter vulnerabilities (openSUSE)
27 vulnerabilities.
golang-github-lusitaniae-apache_exporteropenSUSERollup 4 has Arbitrary File Write via Path Traversal8.8 Highgolang-github-lusitaniae-apache_exporteropenSUSEPublic Dashboards time range restriction on annotations can be bypassed5.3 Mediumgolang-github-lusitaniae-apache_exporteropenSUSEjsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions9.2 Criticalgolang-github-lusitaniae-apache_exporteropenSUSEUncontrolled Resource Consumption in @isaacs/brace-expansion9.2 Criticalgolang-github-lusitaniae-apache_exporteropenSUSEJSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js9.8 Criticalgolang-github-lusitaniae-apache_exporteropenSUSEDashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation8.1 Highgolang-github-lusitaniae-apache_exporteropenSUSEUnauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time out7.5 Highgolang-github-lusitaniae-apache_exporteropenSUSEPrototype Pollution Vulnerability in Lodash _.unset and _.omit functions6.9 Mediumgolang-github-lusitaniae-apache_exporteropenSUSEUnexpected session resumption in crypto/tls10.0 Criticalgolang-github-lusitaniae-apache_exporteropenSUSEExpr has Denial of Service via Unbounded Recursion in Builtin Functions7.5 Highgolang-github-lusitaniae-apache_exporteropenSUSECVE-2025-128168.6 Highgolang-github-lusitaniae-apache_exporteropenSUSEGrafana's insecure DingDing Alert integration exposes sensitive information4.3 Mediumgolang-github-lusitaniae-apache_exporteropenSUSELarge RSA keys can cause high CPU usage in crypto/tls5.3 Mediumgolang-github-lusitaniae-apache_exporteropenSUSEImproper rendering of text nodes in golang.org/x/net/html6.1 Mediumgolang-github-lusitaniae-apache_exporteropenSUSEDenial of service via crafted HTTP/2 stream in net/http and golang.org/x/net7.5 Highgolang-github-lusitaniae-apache_exporteropenSUSEPrometheus Exporter Toolkit vulnerable to basic authentication bypass6.2 Mediumgolang-github-lusitaniae-apache_exporteropenSUSEDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 Highgolang-github-lusitaniae-apache_exporteropenSUSEMemory exhaustion when compiling regular expressions in regexp/syntax7.5 Highgolang-github-lusitaniae-apache_exporteropenSUSEGrafana account takeover via OAuth vulnerability7.1 Highgolang-github-lusitaniae-apache_exporteropenSUSEStored XSS in Grafana's Unified Alerting7.3 Highgolang-github-lusitaniae-apache_exporteropenSUSEPrototype Pollution in async7.8 Highgolang-github-lusitaniae-apache_exporteropenSUSEExposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects8.0 Highgolang-github-lusitaniae-apache_exporteropenSUSEGrafana directory traversal for `.cvs` files4.3 Mediumgolang-github-lusitaniae-apache_exporteropenSUSEGrafana path traversal7.5 Highgolang-github-lusitaniae-apache_exporteropenSUSEPrototype Pollution in kriszyp/json-schema9.8 Criticalgolang-github-lusitaniae-apache_exporteropenSUSEInefficient Regular Expression Complexity in chalk/ansi-regex7.5 Highgolang-github-lusitaniae-apache_exporteropenSUSERegular Expression Denial of Service (ReDoS)7.5 High